Note tree

Each buy fill appends one leaf. The leaf is a hash of the fill's transaction signature and its zat count. Each sell fill spends one leaf and publishes a nullifier, a hash of the signature with a fixed suffix, and the program burns the nullified zats from the reserve. This page recomputes the leaves and nullifiers from fetched fills using the same hash so that the values here can be compared against the program's account.